Baselines control a selection of security and privacy controls to serve as a starting point for system owners to develop tailored baselines specific to the risks associated with implementing that specific system in the organization's organizational production environment. In this session, we will discuss the Access Control (AC) controls implemented into the low, moderate, and high baselines and indicate those controls that protect privacy.